Static task
static1
Behavioral task
behavioral1
Sample
ace765dd9e693c2c8bb976e07a5680b3a11cc8078ac8b1180924ec57461182df.exe
Resource
win7-20220901-en
General
-
Target
ace765dd9e693c2c8bb976e07a5680b3a11cc8078ac8b1180924ec57461182df
-
Size
705KB
-
MD5
1f7fea9c266f6b98c40c5dc9e45c4190
-
SHA1
a577513f51bdd85e086e054e4b4bc7ff15fa2b98
-
SHA256
ace765dd9e693c2c8bb976e07a5680b3a11cc8078ac8b1180924ec57461182df
-
SHA512
632b69d7db94296325270b862e12b95296f784082ae7e466506f747a6e0dc8d78102076f3bc002e778ff7cd4426bceb6d74c5ea2fa82ed38c7dd407b59a708ee
-
SSDEEP
12288:wiAPAH1AKGtq5JTFITEgLBXxlmYNcDyfQ8gi4gHkNwpNUfM0BxeINkh:iAAdq1ITEglkyxNUfM0BJW
Malware Config
Signatures
Files
-
ace765dd9e693c2c8bb976e07a5680b3a11cc8078ac8b1180924ec57461182df.exe windows x86
ed42dfc80c2b3472064e940b82472019
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
PathFileExistsW
SHGetValueW
gdiplus
GdiplusStartup
GdiplusShutdown
GdipAlloc
GdipFree
GdipCloneImage
GdipDisposeImage
GdipGetImageWidth
GdipGetImageHeight
GdipCreateBitmapFromStream
GdipCreateBitmapFromStreamICM
GdipCreateFromHDC
GdipDeleteGraphics
GdipDrawImagePointRectI
GdipDrawImageRectRectI
GdipCloneBrush
GdipDeleteBrush
GdipSetStringFormatAlign
GdipDeleteStringFormat
GdipCreateStringFormat
GdipDrawString
GdipDeleteFont
GdipCreateFont
GdipDeleteFontFamily
GdipCreateFontFamilyFromName
GdipCreateSolidFill
kernel32
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
ReleaseMutex
CreateMutexA
InterlockedIncrement
InterlockedDecrement
GetCurrentProcess
GetCurrentThreadId
FlushInstructionCache
GetTickCount
FreeLibrary
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleW
GetProcAddress
LoadLibraryExW
LoadResource
SizeofResource
lstrcmpiW
FindResourceW
MultiByteToWideChar
RaiseException
GetVersionExW
FreeResource
GlobalAlloc
GlobalLock
GlobalUnlock
MulDiv
lstrcmpW
LocalFree
CloseHandle
CreateProcessW
OutputDebugStringA
WaitForSingleObject
CreateThread
LoadLibraryA
LoadLibraryW
WideCharToMultiByte
InitializeCriticalSection
Sleep
ReadConsoleW
DeviceIoControl
lstrlenA
ResumeThread
GetSystemDirectoryW
OutputDebugStringW
GetDiskFreeSpaceExW
GetConsoleMode
HeapSize
HeapReAlloc
IsValidCodePage
GetACP
GetOEMCP
GetFileType
QueryPerformanceCounter
GetCurrentProcessId
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetTimeZoneInformation
GetFileAttributesW
SetFilePointer
GetConsoleCP
SetFilePointerEx
SetStdHandle
FlushFileBuffers
WriteConsoleW
CreateFileW
SetEndOfFile
SetEnvironmentVariableA
ReadFile
DeleteFileW
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetModuleHandleExW
ExitProcess
WriteFile
GetStdHandle
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
TerminateProcess
GetTimeFormatW
GetDateFormatW
GetStartupInfoW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
RtlUnwind
GetSystemTimeAsFileTime
GetCommandLineW
IsDebuggerPresent
EncodePointer
GetStringTypeW
DecodePointer
VirtualFree
VirtualAlloc
IsProcessorFeaturePresent
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
InterlockedCompareExchange
GetProcessHeap
HeapFree
HeapAlloc
LoadLibraryExA
InterlockedExchange
CreateFileA
CompareStringW
gdi32
CreateCompatibleDC
GetObjectW
GetDeviceCaps
GetTextMetricsW
GetCurrentObject
DeleteDC
SetTextColor
SetBkMode
SelectObject
GetStockObject
DeleteObject
CreateSolidBrush
CreateRoundRectRgn
CreateFontW
CreateCompatibleBitmap
BitBlt
advapi32
RegQueryValueExW
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExW
RegCloseKey
RegQueryInfoKeyW
RegOpenKeyExW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
ole32
CoUninitialize
CoCreateInstance
CoTaskMemAlloc
CoTaskMemRealloc
CoTaskMemFree
CoInitialize
CoInitializeSecurity
CoSetProxyBlanket
CreateStreamOnHGlobal
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
StringFromGUID2
OleInitialize
OleUninitialize
OleLockRunning
CoInitializeEx
oleaut32
SysAllocString
OleCreateFontIndirect
SysFreeString
VarUI4FromStr
VariantInit
VariantClear
SysAllocStringLen
SysStringLen
LoadTypeLi
LoadRegTypeLi
user32
SetWindowTextW
GetClientRect
GetWindowRect
MessageBoxW
SetCursor
MapWindowPoints
OffsetRect
GetWindowLongW
SetWindowLongW
GetParent
GetWindow
LoadCursorW
LoadImageW
EnumDisplaySettingsW
MonitorFromWindow
GetMonitorInfoW
AttachThreadInput
GetForegroundWindow
SetForegroundWindow
FindWindowW
GetWindowThreadProcessId
TrackMouseEvent
IsWindowEnabled
DrawTextW
GetWindowTextW
RegisterWindowMessageW
RegisterClassExW
GetClassInfoExW
CreateWindowExW
InvalidateRect
MoveWindow
GetFocus
SetCapture
CreateAcceleratorTableW
DestroyAcceleratorTable
BeginPaint
EndPaint
InvalidateRgn
RedrawWindow
GetWindowTextLengthW
ClientToScreen
ScreenToClient
GetSysColor
FillRect
GetDesktopWindow
GetClassNameW
CopyRect
CreateDialogParamW
IsWindowVisible
SetWindowPos
SetLayeredWindowAttributes
UpdateLayeredWindow
ShowWindow
DestroyWindow
IsWindow
CallWindowProcW
DefWindowProcW
SendMessageW
wsprintfW
SetWindowRgn
ReleaseDC
GetDC
GetSystemMetrics
EnableWindow
KillTimer
SetTimer
ReleaseCapture
GetActiveWindow
SetFocus
CharNextW
CharLowerBuffA
GetDlgItemTextW
SetDlgItemTextW
GetDlgItem
EndDialog
IsChild
DialogBoxParamW
UnregisterClassW
comctl32
InitCommonControlsEx
Sections
.text Size: 259KB - Virtual size: 259KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 59KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 298KB - Virtual size: 298KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rmnet Size: 56KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE